Which of the following statements about policy-based IPsec tunnels are true? (Choose two. )

Which of the following statements about policy-based IPsec tunnels are true? (Choose two. )
A . They can be configured in both NAT/Route and transparent operation modes.
B . They support L2TP-over-IPsec.
C . They require two firewall policies, one for each directions of traffic flow.
D . They support GRE-over-IPsec.

Answer: AB